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AMENDMENTS TO THE CLAIMS : 

This listing of claims replaces all prior versions and listings of claims in the 
application: 

LISTING OF CLAIMS : 

1 . (Currently Amended) A method of displaying alert information for objects in a 
network, comprising: 

storing performance information for the network objects at predetermined time intervals; 
determining at least one potential root cause of one or more triggers in the network; and 
displaying a topographical network map comprising: 

a host region comprising network objects associated with hosts in the network; 

a storage region comprising network objects associated with storage devices in 
the network; and 

a connectivity region comprising network objects associated with connectivity 
devices in the network configured to be connected to at least one of the hosts and the 
storage devices in the network, including 

wherein the network objects in the topographical network map are associated with at least 
one of the one or more triggers. 
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2. (Original) The method according to claim 1, further including associating a first 
visual indicator with one or more of the displayed network objects associated with the at least 
one potential root cause. 

3. (Original) The method according to claim 1 , further including associating a second 
visual indicator with one or more objects that are identified as the potential root cause objects. 

4. (Original) The method according to claim 3, wherein the second visual indicator is 
associated with objects at a device level. 

5. (Cancelled) 

6. (Cancelled) 

7. (Currently Amended) The method according to claim \ [[6]], further comprising 
including visually identifying a first one of the plurality of cells that corresponds to configuration 
and trigger information for the topographical network map. 

8. (Original) The method according to claim 1, wherein certain ones of the displayed 
network objects are expandable to show devices associated therewith. 
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9. (Original) The method according to claim 1, further including displaying a list of 
devices associated with a selected one of the displayed network objects. 

1 0. (Original) The method according to claim 9, further including displaying 
performance data for one or more of the listed devices. 

1 1 . (Original) The method according to claim 10, further including visually identifying 
a first one of the listed devices as a root cause. 

12. (Original) The method according to claim 1 1 , further including identifying the first 
one of the listed devices as the root cause based upon exceeding a threshold for the performance 
data metric. 

13. (Original) The method according to claim 9, further including adding a selected one 
of the listed devices to the map. 

14. (Original) The method according to claim 1, further including displaying expanded 
views of selected ones of the displayed objects. 

1 5. (Original) The method according to claim 14, further including displaying expanded 
views of selected ones of the displayed objects including objects not associated with the triggers. 
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16. (Original) The method according to claim 1, further including displaying a 
hierarchical view of network objects. 

17. (Original) The method according to claim 1, further including displaying a graph of 
performance data of a first metric for a first one of the displayed objects. 

18. (Original) The method according to claim 1 7, further including displaying a 
threshold for the first metric. 

1 9. (Original) The method according to claim 1 8, further including adjusting the 
threshold based upon user instruction via graphical user interaction. 

20. (Original) The method according to claim 1 7, further including displaying the 
performance data over time. 

2 1 . (Original) The method according to claim 1 7, further including displaying the 
performance data for a period of time selected by a user. 

22. (Original) The method according to claim 17, further including moving a slider to a 
desired time and synchronizing the map to a configuration at the desired time. 
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23. (Original) The method according to claim 17, further including displaying statistical 
bands about the performance data. 

24. (Original) The method according to claim 23, wherein the statistical bands are 
defined by a statistical relationship to historical data. 

25. (Original) The method according to claim 24, further including receiving a user 
selection of a time period for the historical data. 

26. (Original) The method according to claim 23, further including defining the 
statistical bands by using standard deviations from historical data. 

27. (Original) The method according to claim 26, further including defining the 
statistical bands as about 1 .5 standard deviations from the historical data. 

28. (Original) The method according to claim 26, further including defining the 
statistical bands as about 1 .5 standard deviations plus or minus about ten percent. 

29. (Original) The method according to claim 27, wherein the statistical bands are 
displayed for performance data of writes per second for a device. 
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30. (Original) The method according to claim 1, further including setting a threshold as 
a logical combination of a plurality of metrics. 

3 1 . (Currently Amended) A computer system, comprising: 
a processor; 

a display coupled to the processor; and 

a memory coupled to the processor, the memory including program instructions for 
enabling displaying alert information for objects in a network by: 

storing performance information for the network objects at predetermined time 
intervals; 

determining at least one potential root cause of one or more alerts in the network; 

and 

displaying a topographical network map comprising: 

a host region comprising network objects associated with hosts in the 
network; 

a storage region comprising network objects associated with storage 
devices in the network; and 

a connectivity region comprising network objects associated with 
connectivity devices in the network configured to be connected to at least one of 
the hosts and the storage devices in the network, including 
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wherein the network objects in the topographical network map are associated with at least 
one of the one or more alerts. 

32. (Original) The computer system according to claim 3 1 , further including associating 
a first visual indicator with one or more of the displayed network objects associated with the at 
least one potential root cause. 

33. (Original) The computer system according to claim 3 1 , further including associating 
a second visual indicator with one or more objects that are identified as the potential root cause 
objects. 

34. (Original) The computer system according to claim 33, wherein the second visual 
indicator is associated with objects at a device level. 

35. (Cancelled) 

36. (Original) The computer system according to claim 3 1 , further including displaying 
a plurality of cells corresponding to respective periods of time. 
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37. (Original) The computer system according to claim 36, further including visually 
identifying a first one of the plurality of cells that corresponds to configuration and alert 
information for the map. 

38. (Original) The computer system according to claim 3 1 , wherein certain ones of the 
displayed network objects are expandable to show devices associated therewith. 

39. (Original) The computer system according to claim 3 1 , further including displaying 
a list of devices associated with a selected one of the displayed network objects. 

40. (Original) The computer system according to claim 39, further including displaying 
performance data for one or more of the listed devices. 

41 . (Original) The computer system according to claim 40, further including identifying 
a first one of the listed devices as a root cause. 

42. (Original) The computer system according to claim 39, further including adding a 
selected one of the listed devices to the map. 

43. (Original) The computer system according to claim 3 1 , further including displaying 
a graph of performance data of a first metric for a first one of the displayed objects. 
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44. (Original) The computer system according to claim 43, further including displaying 
a threshold for the first metric. 

45. (Original) The computer system according to claim 44, further including relocating 
the threshold based upon user instruction via graphical user interaction. 

46. (Original) The computer system according to claim 43, further including displaying 
a graph of performance data for a metric selected by a user. 

47. (Original) The computer system according to claim 46, further including displaying 
the performance data over time. 

48. (Original) The computer system according to claim 43, further including displaying 
the performance data for a period of time selected by a user. 

49. (Original) The computer system according to claim 43, further including moving a 
slider to a desired time and synchronizing the map to a configuration at the desired time. 

50. (Original) The computer system according to claim 43, further including displaying 
statistical bands about the performance data. 
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51. (Original) The computer system according to claim 50, wherein the statistical bands 
are defined by a statistical relationship to historical data. 

52. (Original) The computer system according to claim 50, further including defining 
the statistical bands by using standard deviations from historical data. 

53. (Original) The computer system according to claim 50, further including defining 
the statistical bands as about 1.5 standard deviations plus or minus about ten percent. 

54. (Original) The computer system according to claim 3 1 , further including setting a 
threshold as a logical combination of a plurality of metrics. 

55. (Currently Amended) An article, comprising: 

a storage medium having stored instructions that when executed by a machine result in 
the following: 

storing performance information for objects in a network at predetermined time 
intervals; 

determining at least one potential root cause of one or more alerts in the network; 

and 



displaying a topographical network map comprising: 
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a host region comprising network objects associated with hosts in the 
network; 

a storage region comprising network objects associated with storage 
devices in the network; and 

a connectivity region comprising network objects associated with 
connectivity devices in the network configured to be connected to at least one of 
the hosts and the storage devices in the network, including 



wherein the network objects in the topographical network map are associated with the 
one or more alerts. 

56. (Original) The article according to claim 55, further including displaying a first 
region for a first type of network object and a second region for a second type of network object. 

57. (Original) The article according to claim 55, further including displaying a list of 
devices associated with a selected one of the displayed network objects. 

58. (Original) The article according to claim 57, further including displaying 
performance data for one or more of the listed devices. 

59. (Original) The article according to claim 58, further including identifying a first one 
of the listed devices as a root cause. 
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60. (Original) The article according to claim 55, further including displaying a graph of 
performance data of a first metric for a first one of the displayed objects. 

61 . (Original) The article according to claim 60, further including moving a slider to a 
desired time and synchronizing the map to a configuration at the desired time. 

62. (Original) The article according to claim 55, further including displaying statistical 
bands about the performance data. 

63. (Original) The article according to claim 55, further including setting a threshold as 
a logical combination of a plurality of metrics. 



